21 console areas
all functions contracted
live-backed or executable adapters
explicit contracts still to implement
must stay at zero
All Java Administrator Functions
Every feature has a UI surface, risk model, guard list, and adapter state. This is the no-missing-functions board.
Server Profiles, Login, And Session8 functions · 4 wired · 4 planned · 0 extensionactive build
| ID | Function | Status | Risk | Surface | Adapter | Guard Requirements |
|---|---|---|---|---|---|---|
| AUTH-001server | Connect to a Mirth server by URLManage server profiles with API URL, environment, TLS mode, health, and active target | API wired | security | /servers | wiredPOST /api/mirth/server-profiles | RBAC permission check · audit log entry · active server context · operator confirmation · session re-check · least-privilege role mapping · sensitive-field redaction |
| AUTH-002server | Manage multiple Administrator launcher connectionsPer-user multi-server profile list with quick switching across test/stage/prod/DR | API wired | security | /servers | wiredPOST /api/mirth/server-profiles | RBAC permission check · audit log entry · active server context · operator confirmation · session re-check · least-privilege role mapping · sensitive-field redaction |
| AUTH-003server | Login to selected serverServer-side credential/token exchange; no Mirth passwords in browser storage | Not started | security | /servers | plannedPOST /api/mirth/server-profiles/{serverId}/activate | RBAC permission check · audit log entry · active server context · operator confirmation · session re-check · least-privilege role mapping · sensitive-field redaction |
| AUTH-004user | First-login/password-change flowsSecure password setup/change flow where supported by target server | Not started | security | /servers | plannedPOST /api/mirth/actions/AUTH-004 | RBAC permission check · audit log entry · active server context · operator confirmation · session re-check · least-privilege role mapping · sensitive-field redaction |
| AUTH-005user | Session timeout/logoffExplicit logout, idle timeout, session expiration handling, upstream 401 shown in-page | Not started | security | /servers | plannedPOST /api/mirth/actions/AUTH-005 | RBAC permission check · audit log entry · active server context · operator confirmation · session re-check · least-privilege role mapping · sensitive-field redaction |
| AUTH-006server | TLS/certificate handlingTrust policy per server profile; cert warnings surfaced without browser secret leakage | API wired | security | /servers | wiredPOST /api/mirth/server-profiles | RBAC permission check · audit log entry · active server context · operator confirmation · session re-check · least-privilege role mapping · sensitive-field redaction |
| AUTH-007user | Permissions and rolesRBAC loaded per active server and enforced on every action | Not started | security | /servers | plannedPOST /api/mirth/actions/AUTH-007 | RBAC permission check · audit log entry · active server context · operator confirmation · session re-check · least-privilege role mapping · sensitive-field redaction |
| AUTH-008server | Active contextActive server, environment, user, write mode, and connection state visible globally | API wired | security | /servers | wiredPOST /api/mirth/server-profiles/{serverId}/activate | RBAC permission check · audit log entry · active server context · operator confirmation · session re-check · least-privilege role mapping · sensitive-field redaction |
App Shell, Tables, And Operator Ergonomics8 functions · 0 wired · 8 planned · 0 extensionactive build
| ID | Function | Status | Risk | Surface | Adapter | Guard Requirements |
|---|---|---|---|---|---|---|
| UX-001server | Left navigation/task panelFull desktop console shell with monitor, management, edit, settings, and admin areas | Scaffolded | write | / | plannedGET /api/mirth/actions/UX-001 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| UX-002server | Context-sensitive tasksPage/selection-aware action rail or toolbar matching available operations | Scaffolded | read | / | plannedGET / | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| UX-003server | Sort/filter/select tablesSortable, filterable, keyboard-friendly tables with multi-select and preserved selection | Not started | read | / | plannedGET / | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| UX-004server | Show/hide columnsColumn picker and saved user preferences per table | Not started | write | / | plannedPOST /api/mirth/actions/UX-004 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| UX-005server | Table copy/export ergonomicsCopy selected cells/rows and export visible/search result data where appropriate | Not started | read | / | plannedGET / | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| UX-006server | NotificationsNotification center for server/product notices and unread state | Not started | read | / | plannedGET / | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| UX-007server | User API docs linkOpen target server User API/Javadocs or local equivalent | Not started | read | / | plannedGET / | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| UX-008server | Client/REST API docs linkOpen target server REST/API docs or local equivalent | Not started | read | / | plannedGET / | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
Dashboard / Monitor18 functions · 12 wired · 6 planned · 0 extensionactive build
| ID | Function | Status | Risk | Surface | Adapter | Guard Requirements |
|---|---|---|---|---|---|---|
| MON-001server | Dashboard channel tableLive deployed-channel table by active server | Scaffolded | read | / | wiredGET /api/channels/statuses | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| MON-002server | Channel and connector stateNormalize deployed, started, paused, stopped, undeployed, warning, error, unknown | Scaffolded | read | / | wiredGET /api/channels/statuses | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| MON-003server | Current and lifetime statisticsReceived, sent, filtered, queued, errored by channel and connector, with current/lifetime mode | API wired | read | / | wiredGET /api/channels/statistics | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| MON-004server | Auto refreshPolling/SSE/WebSocket refresh with stale-state indicator and user interval setting | Not started | read | / | plannedGET / | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| MON-005server | Manual refreshRefresh current dashboard/table/log/global-map tabs | Scaffolded | read | / | plannedGET / | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| MON-006server | Channel/name/tag filteringFilter dashboard by tag, channel name, partial name, and multi-criteria | Not started | read | / | plannedGET / | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| MON-007server | Server log tabView, pause/resume, clear local view, search, and export server log stream | Not started | deploy | / | plannedPOST /api/mirth/actions/MON-007 | RBAC permission check · audit log entry · active server context · operator confirmation · live XML export · draft-to-live diff · deploy note · rollback snapshot |
| MON-008server | Connection log tabView, pause/resume, clear local view, search, and export connection log stream | Not started | deploy | / | plannedPOST /api/mirth/actions/MON-008 | RBAC permission check · audit log entry · active server context · operator confirmation · live XML export · draft-to-live diff · deploy note · rollback snapshot |
| MON-009server | Global maps tabView global map and per-channel global channel map entries with long-value inspection | Not started | read | / | plannedGET / | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| MON-010channel | Send message taskSend a payload to a selected channel with source/metadata options and audit | API wired | write | / | wiredPOST /api/channels/{channelId}/messages | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| MON-011channel | View messages taskOpen message browser scoped to selected channel | Scaffolded | read | / | wiredGET /api/channels/{channelId}/messages | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| MON-012channel | Remove all messagesDestructive purge of channel message/attachment data with hard confirmation and audit | API wired | destructive | / | wiredDELETE /api/channels/{channelId}/messages/_removeAll | RBAC permission check · audit log entry · active server context · operator confirmation · live export/backup snapshot · hard confirmation phrase · rollback or irreversibility note |
| MON-013channel | Clear statisticsReset current/lifetime statistics at channel/connector scope with audit | API wired | destructive | / | wiredPOST /api/channels/_clearStatistics | RBAC permission check · audit log entry · active server context · operator confirmation · live export/backup snapshot · hard confirmation phrase · rollback or irreversibility note |
| MON-014channel | Start/resumeStart selected channel(s)/connector(s), honoring dependency workflow | API wired | deploy | / | wiredPOST /api/channels/{channelId}/_start | RBAC permission check · audit log entry · active server context · operator confirmation · live XML export · draft-to-live diff · deploy note · rollback snapshot |
| MON-015channel | PausePause selected channel(s), honoring dependency workflow | API wired | deploy | / | wiredPOST /api/channels/{channelId}/_pause | RBAC permission check · audit log entry · active server context · operator confirmation · live XML export · draft-to-live diff · deploy note · rollback snapshot |
| MON-016channel | StopGracefully stop selected channel(s)/connector(s), honoring dependency workflow | API wired | deploy | / | wiredPOST /api/channels/{channelId}/_stop | RBAC permission check · audit log entry · active server context · operator confirmation · live XML export · draft-to-live diff · deploy note · rollback snapshot |
| MON-017channel | HaltImmediate halt behavior with unfinished-message warning and audit | API wired | deploy | / | wiredPOST /api/channels/{channelId}/_halt | RBAC permission check · audit log entry · active server context · operator confirmation · live XML export · draft-to-live diff · deploy note · rollback snapshot |
| MON-018channel | Undeploy from dashboardUndeploy selected deployed channel(s), honoring dependency workflow | API wired | deploy | / | wiredPOST /api/channels/{channelId}/_undeploy | RBAC permission check · audit log entry · active server context · operator confirmation · live XML export · draft-to-live diff · deploy note · rollback snapshot |
Message Browser24 functions · 13 wired · 11 planned · 0 extensionactive build
| ID | Function | Status | Risk | Surface | Adapter | Guard Requirements |
|---|---|---|---|---|---|---|
| MSG-001channel | Navigate from dashboard/channelsOpen message browser scoped to channel/server context | Scaffolded | read | /messages | wiredGET /api/channels/{channelId}/messages | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| MSG-002channel | Search messagesSearch by channel, date range, status, connector, message ID, metadata, and content | API wired | read | /messages | wiredGET /api/channels/{channelId}/messages | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| MSG-003message | Advanced search filtersBoolean/filter builder for content, metadata, connector, status, and case-insensitive operators | Scaffolded | read | /messages | plannedGET /messages | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| MSG-004channel | Count and paginationCount results, page through stable result sets, preserve max message ID behavior | API wired | read | /messages | wiredGET /api/channels/{channelId}/messages/count | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| MSG-005message | Refresh search pageRefresh current page without pulling newer messages into the result set unexpectedly | Scaffolded | read | /messages | plannedGET /messages | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| MSG-006message | Metadata tableMessage result table with standard metadata columns and custom metadata columns | Scaffolded | read | /messages | plannedGET /messages | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| MSG-007message | Add/remove metadata columnsUser-customizable metadata result columns | Scaffolded | destructive | /messages | plannedGET /api/mirth/actions/MSG-007 | RBAC permission check · audit log entry · active server context · operator confirmation · live export/backup snapshot · hard confirmation phrase · rollback or irreversibility note |
| MSG-008message | Content tabRaw, processed raw, transformed, encoded, sent, response, and response-transformed content tabs | API wired | read | /messages | wiredGET /api/channels/{channelId}/messages/{messageId} | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| MSG-009message | Content formattingPretty print XML/JSON and preserve raw/plain views | Scaffolded | read | /messages | plannedGET /messages | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| MSG-010message | Mappings tabShow connector/channel/source/response map content for selected message | Scaffolded | read | /messages | plannedGET /messages | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| MSG-011message | Errors tabShow error details, type/category, exception message, stack/source context where available | Scaffolded | read | /messages | plannedGET /messages | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| MSG-012message | Attachments tabAttachment table with metadata, size, type, and download/export actions | API wired | read | /messages | wiredGET /api/channels/{channelId}/messages/{messageId}/attachments | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| MSG-013message | Text attachment viewerRender text attachments safely | Scaffolded | read | /messages | plannedGET /messages | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| MSG-014message | Image attachment viewerRender image attachments safely | Scaffolded | read | /messages | plannedGET /messages | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| MSG-015message | DICOM attachment viewerRender/download DICOM attachment with metadata-safe viewer or fallback download | Scaffolded | read | /messages | plannedGET /messages | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| MSG-016message | PDF attachment viewerRender/download PDF attachment safely | Scaffolded | read | /messages | plannedGET /messages | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| MSG-017channel | Import messagesImport messages from file into channel message data with audit and clear non-processing warning | API wired | write | /messages | wiredPOST /api/channels/{channelId}/messages/_import | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| MSG-018channel | Export resultsExport all search matches, not just current page, with format/password options where supported | API wired | security | /messages | wiredPOST /api/channels/{channelId}/messages/_exportUsingFilter | RBAC permission check · audit log entry · active server context · operator confirmation · session re-check · least-privilege role mapping · sensitive-field redaction |
| MSG-019channel | Remove resultsDestructive remove of selected/search-result messages with hard confirmation and audit | API wired | destructive | /messages | wiredPOST /api/channels/{channelId}/messages/_remove | RBAC permission check · audit log entry · active server context · operator confirmation · live export/backup snapshot · hard confirmation phrase · rollback or irreversibility note |
| MSG-020channel | Remove all messagesDestructive channel-wide purge from browser context with hard confirmation and audit | API wired | destructive | /messages | wiredDELETE /api/channels/{channelId}/messages/_removeAll | RBAC permission check · audit log entry · active server context · operator confirmation · live export/backup snapshot · hard confirmation phrase · rollback or irreversibility note |
| MSG-021channel | Reprocess resultsReprocess all selected/search-result messages with idempotency and audit | API wired | deploy | /messages | wiredPOST /api/channels/{channelId}/messages/_reprocessWithFilter | RBAC permission check · audit log entry · active server context · operator confirmation · live XML export · draft-to-live diff · deploy note · rollback snapshot |
| MSG-022message | Reprocess messageReprocess a single message/connector message with target options | API wired | deploy | /messages | wiredPOST /api/channels/{channelId}/messages/{messageId}/_reprocess | RBAC permission check · audit log entry · active server context · operator confirmation · live XML export · draft-to-live diff · deploy note · rollback snapshot |
| MSG-023message | Export attachmentExport/download selected attachment | API wired | read | /messages | wiredGET /api/channels/{channelId}/messages/{messageId}/attachments/{attachmentId} | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| MSG-024channel | Send message from browserSend new payload to current channel from message browser | API wired | write | /messages | wiredPOST /api/channels/{channelId}/messages | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
Alerts11 functions · 6 wired · 4 planned · 1 extensionactive build
| ID | Function | Status | Risk | Surface | Adapter | Guard Requirements |
|---|---|---|---|---|---|---|
| ALT-001server | Alerts tableView enabled state, alert name/ID, and trigger/action counters | Scaffolded | read | /events | wiredGET /api/alerts | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| ALT-002server | Refresh alertsManual and auto-refresh alert state | Scaffolded | read | /events | wiredGET /api/alerts/statuses | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| ALT-003alert | New/edit/delete alertFull alert CRUD with guarded destructive delete | API wired | destructive | /events | wiredPUT /api/alerts/{alertId} | RBAC permission check · audit log entry · active server context · operator confirmation · live export/backup snapshot · hard confirmation phrase · rollback or irreversibility note |
| ALT-004alert | Import/export alertsImport one alert, export selected/all alerts as XML | API wired | write | /events | wiredPOST /api/alerts | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| ALT-005alert | Enable/disable alertGuarded alert activation/deactivation with audit | API wired | write | /events | wiredPOST /api/alerts/{alertId}/{alertOperation} | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| ALT-006alert | Error trigger configConfigure error types, categories, regex, and channel scope | Scaffolded | read | /events | plannedGET /events | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| ALT-007alert | Enabled channelsSelect all/specific channels the alert applies to | Scaffolded | read | /events | plannedGET /events | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| ALT-008alert | Alert actionsConfigure channel dispatch, email, user, and role actions where supported | Scaffolded | security | /events | plannedGET /api/mirth/actions/ALT-008 | RBAC permission check · audit log entry · active server context · operator confirmation · session re-check · least-privilege role mapping · sensitive-field redaction |
| ALT-009alert | Alert templates/variablesSubject/body/template editor with supported variables and validation | Scaffolded | write | /events | plannedGET /api/mirth/actions/ALT-009 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| ALT-010alert | Save/export from edit viewSave current alert and export current alert XML | API wired | write | /events | wiredPUT /api/alerts/{alertId} | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| ALT-011alert | Advanced alerting extensionMetric/escalation/schedule/throttle panels when extension exists | Extension-dependent | extension | /events | extensionPOST /api/mirth/actions/ALT-011 | RBAC permission check · audit log entry · active server context · operator confirmation · extension installed check · restart/dependency impact warning |
Events And Audit6 functions · 4 wired · 2 planned · 0 extensionactive build
| ID | Function | Status | Risk | Surface | Adapter | Guard Requirements |
|---|---|---|---|---|---|---|
| EVT-001server | Events tableView user/system events for active server | Scaffolded | read | /events | wiredGET /api/events | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| EVT-002event | Event metadata/attributesShow event metadata and attribute details | Scaffolded | read | /events | plannedGET /events | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| EVT-003event | PHI event visibilityPermission-aware PHI event display and redaction | Scaffolded | security | /events | plannedGET /api/mirth/actions/EVT-003 | RBAC permission check · audit log entry · active server context · operator confirmation · session re-check · least-privilege role mapping · sensitive-field redaction |
| EVT-004server | Event searchSearch by date, user, type, outcome, metadata, and advanced filters | API wired | read | /events | wiredGET /api/events | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| EVT-005server | Export all eventsExport event history with audit/reporting controls | API wired | read | /events | wiredPOST /api/events/_export | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| EVT-006server | Web console audit trailStore this app's own read/write/deploy/approval actions in a database-backed immutable audit ledger with operator/server identity, references, reporting, and exports | API wired | deploy | /events | wiredPOST /api/mirth/actions | RBAC permission check · audit log entry · active server context · operator confirmation · live XML export · draft-to-live diff · deploy note · rollback snapshot |
Channels And Groups23 functions · 13 wired · 9 planned · 1 extensionactive build
| ID | Function | Status | Risk | Surface | Adapter | Guard Requirements |
|---|---|---|---|---|---|---|
| CH-001server | Channel tableList channels with ID, name, revision, deployed/enabled state, group, tags, invalid state | Scaffolded | read | /builder | wiredGET /api/channels | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| CH-002server | Channel groups displayShow/hide groups, default group, group rows, group membership | Not started | read | /builder | wiredGET /api/channelgroups | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| CH-003channel | Tag display and filteringFilter and display channels by name/tag with same semantics across monitor/channels | Not started | read | /builder | plannedGET /builder | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| CH-004channel | Drag/drop channel groupingAssign channels to groups using UI actions and accessible fallback | Not started | write | /builder | plannedPOST /api/mirth/actions/CH-004 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| CH-005channel | Drag/drop XML importImport channel/group XML files, including multi-file import | Not started | write | /builder | plannedPOST /api/mirth/actions/CH-005 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| CH-006channel | Get channel name/IDCopy channel name/ID quickly | Not started | read | /builder | plannedGET /builder | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| CH-007server | Refresh channelsRefresh channel table | Scaffolded | read | /builder | wiredGET /api/channels | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| CH-008server | Redeploy allUndeploy all then deploy enabled channels with dependency and audit workflow | API wired | deploy | /builder | wiredPOST /api/channels/_redeployAll | RBAC permission check · audit log entry · active server context · operator confirmation · live XML export · draft-to-live diff · deploy note · rollback snapshot |
| CH-009channel | Deploy channel/groupDeploy selected channels or group with diff, snapshot, note, dependency handling | API wired | deploy | /builder | wiredPOST /api/channels/{channelId}/_deploy | RBAC permission check · audit log entry · active server context · operator confirmation · live XML export · draft-to-live diff · deploy note · rollback snapshot |
| CH-010channel | Debug channelDeploy selected channel in debug mode for selected scripts | Scaffolded | deploy | /channels | plannedGET /api/mirth/actions/CH-010 | RBAC permission check · audit log entry · active server context · operator confirmation · live XML export · draft-to-live diff · deploy note · rollback snapshot |
| CH-011channel | New channelCreate draft channel before saving to server | Not started | write | /channels | plannedPOST /api/mirth/actions/CH-011 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| CH-012channel | Import channelImport channel XML, handle name collisions, optionally include code template libraries | API wired | write | /channels | wiredPOST /api/channels | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| CH-013channel | Export selected/all channelsExport channel XML with optional linked code template libraries | API wired | read | /channels | wiredGET /api/channels/{channelId} | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| CH-014channel | Delete channelDestructive delete with message/attachment deletion warning, snapshot, confirmation, audit | API wired | destructive | /channels | wiredDELETE /api/channels/{channelId} | RBAC permission check · audit log entry · active server context · operator confirmation · live export/backup snapshot · hard confirmation phrase · rollback or irreversibility note |
| CH-015channel | Clone channelClone selected channel into unsaved draft with unique-name prompt | Not started | write | /channels | plannedPOST /api/mirth/actions/CH-015 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| CH-016channel | Edit channelOpen channel Studio for selected channel | Scaffolded | write | /channels | wiredGET /api/channels/{channelId} | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| CH-017channel | Enable/disable channelToggle deploy eligibility without confusing current deployed state | API wired | deploy | /channels | wiredPOST /api/channels/{channelId}/enabled/{enabled} | RBAC permission check · audit log entry · active server context · operator confirmation · live XML export · draft-to-live diff · deploy note · rollback snapshot |
| CH-018channel | View channel messagesOpen message browser for selected channel | Scaffolded | read | /channels | wiredGET /api/channels/{channelId}/messages | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| CH-019channel | View channel historyShow installed channel history/version extension when available | Extension-dependent | extension | /channels | extensionPOST /api/mirth/actions/CH-019 | RBAC permission check · audit log entry · active server context · operator confirmation · extension installed check · restart/dependency impact warning |
| CH-020channel-group | Save group changesPersist group reorder/membership/detail changes | API wired | write | /builder | wiredPOST /api/channelgroups/_bulkUpdate | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| CH-021channel | Assign to groupMove selected channels to group | Not started | write | /builder | plannedPOST /api/mirth/actions/CH-021 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| CH-022channel-group | New/edit/delete groupChannel group CRUD with default-group behavior | API wired | destructive | /builder | wiredPOST /api/channelgroups/_bulkUpdate | RBAC permission check · audit log entry · active server context · operator confirmation · live export/backup snapshot · hard confirmation phrase · rollback or irreversibility note |
| CH-023channel-group | Import/export groupsImport/export selected/all channel group XML, with code-template option | Not started | write | /builder | plannedGET /api/channelgroups | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
Channel Studio / Edit Channel23 functions · 2 wired · 21 planned · 0 extensionactive build
| ID | Function | Status | Risk | Surface | Adapter | Guard Requirements |
|---|---|---|---|---|---|---|
| EDIT-001channel | Summary tabEdit channel name, ID, revision, enabled flag, tags, description | Scaffolded | write | /builder | plannedGET /api/mirth/actions/EDIT-001 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| EDIT-002channel | Data type windowSet inbound/outbound data types and properties with bulk edit mode | Scaffolded | write | /builder | plannedGET /api/mirth/actions/EDIT-002 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| EDIT-003channel | Dependencies windowLink code template libraries, library resources, deploy/start dependencies, stop/pause/undeploy behavior | Scaffolded | deploy | /builder | plannedGET /api/mirth/actions/EDIT-003 | RBAC permission check · audit log entry · active server context · operator confirmation · live XML export · draft-to-live diff · deploy note · rollback snapshot |
| EDIT-004channel | Attachment handlersConfigure entire-message, regex, DICOM, JavaScript, custom handlers, extraction/reattachment/MIME rules | Scaffolded | write | /builder | plannedGET /api/mirth/actions/EDIT-004 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| EDIT-005channel | Message storage settingsComplete message-storage slider/options and encryption/persistence settings | Scaffolded | write | /builder | plannedGET /api/mirth/actions/EDIT-005 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| EDIT-006channel | Message pruning settingsChannel-level pruning/retention settings | Scaffolded | write | /builder | plannedGET /api/mirth/actions/EDIT-006 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| EDIT-007channel | Custom metadata columnsAdd/edit/remove metadata columns and search integration | Scaffolded | destructive | /builder | plannedGET /api/mirth/actions/EDIT-007 | RBAC permission check · audit log entry · active server context · operator confirmation · live export/backup snapshot · hard confirmation phrase · rollback or irreversibility note |
| EDIT-008channel | Source tabChoose source connector and edit source connector settings | Scaffolded | write | /builder | plannedGET /api/mirth/actions/EDIT-008 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| EDIT-009channel | Listener settingsListener binding/port/protocol settings where applicable | Scaffolded | write | /builder | plannedGET /api/mirth/actions/EDIT-009 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| EDIT-010channel | Polling settingsInterval, time, cron, and advanced polling settings | Scaffolded | write | /builder | plannedGET /api/mirth/actions/EDIT-010 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| EDIT-011channel | Source HTTP authNone/basic/digest/JavaScript/custom class/OAuth token verification where supported | Scaffolded | write | /builder | plannedGET /api/mirth/actions/EDIT-011 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| EDIT-012channel | Source connector propertiesDynamic source connector property renderer | Scaffolded | write | /builder | plannedGET /api/mirth/actions/EDIT-012 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| EDIT-013channel | Destinations tabDestination table with status, name, ID, type, chain, order | Scaffolded | write | /builder | plannedGET /api/mirth/actions/EDIT-013 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| EDIT-014channel | Destination CRUD/orderNew/delete/clone/enable/disable/move destinations | Scaffolded | destructive | /builder | plannedGET /api/mirth/actions/EDIT-014 | RBAC permission check · audit log entry · active server context · operator confirmation · live export/backup snapshot · hard confirmation phrase · rollback or irreversibility note |
| EDIT-015channel | Destination queue settingsQueue mode, retry count/interval, rotation, regeneration, include filter/transformer, threads, assignment, buffer | Scaffolded | write | /builder | plannedGET /api/mirth/actions/EDIT-015 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| EDIT-016channel | Destination response handlingResponse validation and attachment reattachment settings | Scaffolded | write | /builder | plannedGET /api/mirth/actions/EDIT-016 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| EDIT-017channel | Destination mappings panelDrag/drop standard variables, mapper variables, and templates into connector fields | Scaffolded | write | /builder | plannedGET /api/mirth/actions/EDIT-017 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| EDIT-018channel | Destination response transformerEdit response transformer for selected destination | Scaffolded | write | /builder | plannedGET /api/mirth/actions/EDIT-018 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| EDIT-019channel | Channel scriptsDeploy, undeploy, preprocessor, postprocessor channel scripts | Scaffolded | deploy | /builder | plannedGET /api/mirth/actions/EDIT-019 | RBAC permission check · audit log entry · active server context · operator confirmation · live XML export · draft-to-live diff · deploy note · rollback snapshot |
| EDIT-020channel | Save changesSave new channel revision only when changed | API wired | write | /builder | wiredPUT /api/channels/{channelId} | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| EDIT-021channel | Validate connectorValidate current connector properties and script syntax | Scaffolded | write | /builder | plannedGET /api/mirth/actions/EDIT-021 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| EDIT-022channel | Import/export connectorImport/export source or destination connector XML including filter/transformer | Not started | write | /builder | plannedPOST /api/mirth/actions/EDIT-022 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| EDIT-023channel | Export/deploy/debug from editorExport current channel, deploy current channel, debug current channel | API wired | deploy | /builder | wiredGET /api/channels/{channelId} | RBAC permission check · audit log entry · active server context · operator confirmation · live XML export · draft-to-live diff · deploy note · rollback snapshot |
Data Types10 functions · 0 wired · 10 planned · 0 extensionactive build
| ID | Function | Status | Risk | Surface | Adapter | Guard Requirements |
|---|---|---|---|---|---|---|
| DT-001channel | Delimited text data typeInbound/outbound property editor and batch options | Scaffolded | write | /builder | plannedGET /api/mirth/actions/DT-001 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| DT-002channel | DICOM data typeInbound/outbound property editor and attachment considerations | Scaffolded | write | /builder | plannedGET /api/mirth/actions/DT-002 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| DT-003channel | EDI/X12 data typeInbound/outbound property editor | Scaffolded | write | /builder | plannedGET /api/mirth/actions/DT-003 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| DT-004channel | HL7 v2.x data typeParser/serializer/batch property editor | Scaffolded | write | /builder | plannedGET /api/mirth/actions/DT-004 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| DT-005channel | HL7 v3.x data typeParser/serializer property editor | Scaffolded | write | /builder | plannedGET /api/mirth/actions/DT-005 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| DT-006channel | JSON data typeParser/serializer property editor and formatting support | Scaffolded | write | /builder | plannedGET /api/mirth/actions/DT-006 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| DT-007channel | NCPDP data typeParser/serializer property editor | Scaffolded | write | /builder | plannedGET /api/mirth/actions/DT-007 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| DT-008channel | Raw data typeRaw inbound/outbound property editor | Scaffolded | write | /builder | plannedGET /api/mirth/actions/DT-008 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| DT-009channel | XML data typeXML parser/serializer property editor | Scaffolded | write | /builder | plannedGET /api/mirth/actions/DT-009 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| DT-010channel | Batch processingBatch settings and JavaScript batch script editor | Scaffolded | write | /builder | plannedGET /api/mirth/actions/DT-010 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
Built-In Source Connector Types10 functions · 0 wired · 9 planned · 1 extensionactive build
| ID | Function | Status | Risk | Surface | Adapter | Guard Requirements |
|---|---|---|---|---|---|---|
| SRC-001channel | Channel ReaderFull property editor and source map variable support | Scaffolded | write | /builder | plannedGET /api/mirth/actions/SRC-001 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| SRC-002channel | DICOM ListenerFull property editor and DICOM listener-specific validation | Scaffolded | write | /builder | plannedGET /api/mirth/actions/SRC-002 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| SRC-003channel | Database ReaderSQL/driver/resource editor, poll schedule, driver management hooks | Scaffolded | write | /builder | plannedGET /api/mirth/actions/SRC-003 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| SRC-004channel | File ReaderFile/FTP/SFTP/SMB/S3 editor, post-processing, polling, encoding | Scaffolded | write | /builder | plannedGET /api/mirth/actions/SRC-004 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| SRC-005channel | HTTP ListenerListener endpoint, response, auth, header/body handling | Scaffolded | read | /builder | plannedGET /builder | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| SRC-006channel | JMS ListenerJMS connection/template editor | Scaffolded | write | /builder | plannedGET /api/mirth/actions/SRC-006 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| SRC-007channel | JavaScript ReaderJavaScript reader editor and return-value handling | Scaffolded | write | /builder | plannedGET /api/mirth/actions/SRC-007 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| SRC-008channel | TCP ListenerBasic/MLLP transmission mode editor, byte settings, source map variables | Scaffolded | write | /builder | plannedGET /api/mirth/actions/SRC-008 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| SRC-009channel | Web Service ListenerSOAP/web-service listener property editor | Scaffolded | write | /builder | plannedGET /api/mirth/actions/SRC-009 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| SRC-010channel | Extension source connectorsDynamic schemas for installed source connector extensions | Extension-dependent | extension | /builder | extensionPOST /api/mirth/actions/SRC-010 | RBAC permission check · audit log entry · active server context · operator confirmation · extension installed check · restart/dependency impact warning |
Built-In Destination Connector Types12 functions · 0 wired · 11 planned · 1 extensionactive build
| ID | Function | Status | Risk | Surface | Adapter | Guard Requirements |
|---|---|---|---|---|---|---|
| DEST-001channel | Channel WriterFull property editor and target channel validation | Scaffolded | write | /builder | plannedGET /api/mirth/actions/DEST-001 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| DEST-002channel | DICOM SenderDICOM send property editor and response handling | Scaffolded | write | /builder | plannedGET /api/mirth/actions/DEST-002 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| DEST-003channel | Database WriterSQL/resource/driver editor with safe secret handling | Scaffolded | write | /builder | plannedGET /api/mirth/actions/DEST-003 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| DEST-004channel | Document WriterDocument template/output editor | Scaffolded | write | /builder | plannedGET /api/mirth/actions/DEST-004 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| DEST-005channel | File WriterFile/FTP/SFTP/SMB/S3 output editor and templates | Scaffolded | write | /builder | plannedGET /api/mirth/actions/DEST-005 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| DEST-006channel | HTTP SenderMethod/URL/headers/body/auth/response editor | Scaffolded | write | /builder | plannedGET /api/mirth/actions/DEST-006 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| DEST-007channel | JMS SenderJMS connection/template editor | Scaffolded | write | /builder | plannedGET /api/mirth/actions/DEST-007 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| DEST-008channel | JavaScript WriterJavaScript writer editor and return-value handling | Scaffolded | write | /builder | plannedGET /api/mirth/actions/DEST-008 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| DEST-009channel | SMTP SenderSMTP/email editor with server settings integration | Scaffolded | write | /builder | plannedGET /api/mirth/actions/DEST-009 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| DEST-010channel | TCP SenderBasic/MLLP transmission editor and response options | Scaffolded | write | /builder | plannedGET /api/mirth/actions/DEST-010 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| DEST-011channel | Web Service SenderSOAP/web-service sender editor | Scaffolded | write | /builder | plannedGET /api/mirth/actions/DEST-011 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| DEST-012channel | Extension destination connectorsDynamic schemas for installed destination connector extensions | Extension-dependent | extension | /builder | extensionPOST /api/mirth/actions/DEST-012 | RBAC permission check · audit log entry · active server context · operator confirmation · extension installed check · restart/dependency impact warning |
Filters, Transformers, And Response Transformers16 functions · 0 wired · 16 planned · 0 extensionactive build
| ID | Function | Status | Risk | Surface | Adapter | Guard Requirements |
|---|---|---|---|---|---|---|
| FT-001channel | Message templates tabInbound/outbound templates, data type editing, template specification | Scaffolded | write | /builder | plannedGET /api/mirth/actions/FT-001 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| FT-002channel | Message trees tabParse message/template trees, filter nodes, expand/collapse, drag/drop values | Scaffolded | read | /builder | plannedGET /builder | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| FT-003channel | Reference tabVariables, helper methods, code templates, drag/drop into editor | Scaffolded | write | /builder | plannedGET /api/mirth/actions/FT-003 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| FT-004channel | Create rule/step from treeCreate rule builder, mapper, message builder steps from selected node | Scaffolded | write | /builder | plannedGET /api/mirth/actions/FT-004 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| FT-005channel | Filter rule tableAdd/delete/reorder rules with enabled/disabled state and selection | Scaffolded | destructive | /builder | plannedGET /api/mirth/actions/FT-005 | RBAC permission check · audit log entry · active server context · operator confirmation · live export/backup snapshot · hard confirmation phrase · rollback or irreversibility note |
| FT-006channel | Rule typesRule builder, JavaScript, external script, iterator | Scaffolded | read | /builder | plannedGET /builder | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| FT-007channel | Transformer step tableAdd/delete/reorder steps with enabled/disabled state and selection | Scaffolded | destructive | /builder | plannedGET /api/mirth/actions/FT-007 | RBAC permission check · audit log entry · active server context · operator confirmation · live export/backup snapshot · hard confirmation phrase · rollback or irreversibility note |
| FT-008channel | Step typesMapper, message builder, JavaScript, external script, XSLT, destination set filter, iterator | Scaffolded | read | /builder | plannedGET /builder | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| FT-009channel | IteratorsAssign/remove nested rules/steps to/from iterators | Scaffolded | destructive | /builder | plannedGET /api/mirth/actions/FT-009 | RBAC permission check · audit log entry · active server context · operator confirmation · live export/backup snapshot · hard confirmation phrase · rollback or irreversibility note |
| FT-010channel | Generated script viewView generated script for rules/steps/iterators without editing it | Scaffolded | write | /builder | plannedGET /api/mirth/actions/FT-010 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| FT-011channel | Import/export filtersImport append/replace and export filter XML | Scaffolded | write | /builder | plannedGET /api/mirth/actions/FT-011 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| FT-012channel | Import/export transformersImport append/replace and export transformer XML | Scaffolded | write | /builder | plannedGET /api/mirth/actions/FT-012 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| FT-013channel | Validate filter/ruleValidate full filter and selected rule | Scaffolded | read | /builder | plannedGET /builder | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| FT-014channel | Validate transformer/stepValidate full transformer and selected step | Scaffolded | read | /builder | plannedGET /builder | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| FT-015channel | Move rule/step up/downPreserve iterator semantics while reordering | Scaffolded | read | /builder | plannedGET /builder | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| FT-016channel | Response transformer scenariosModify destination response and common response-handling patterns | Scaffolded | read | /builder | plannedGET /builder | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
Script IDE, JavaScript Tooling, And Debugger9 functions · 2 wired · 7 planned · 0 extensionactive build
| ID | Function | Status | Risk | Surface | Adapter | Guard Requirements |
|---|---|---|---|---|---|---|
| JS-001server | JavaScript editorSyntax highlighting, line numbers, folding, selection, search/find/replace | API wired | write | /code | wiredGET /code | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| JS-002code-template | Context menuEditor context menu actions matching common Java client operations | Not started | write | /code | plannedPOST /api/mirth/actions/JS-002 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| JS-003code-template | Auto-completionMirth variables, map APIs, built-in templates, JSDoc templates, user templates | Not started | read | /code | plannedGET /code | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| JS-004code-template | Shortcut remapping/preferencesUser-specific editor shortcut and editor behavior preferences | Not started | write | /code | plannedPOST /api/mirth/actions/JS-004 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| JS-005server | Variable maps referenceconnectorMap, channelMap, sourceMap, responseMap, globalChannelMap, globalMap, configurationMap lookup help | Scaffolded | read | /code | wiredGET /code | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| JS-006code-template | Attachment functions referenceAttachment helper functions/classes and examples in reference panel | Not started | read | /code | plannedGET /code | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| JS-007code-template | User API/Javadocs referenceOpen/inline target server user API docs | Not started | read | /code | plannedGET /code | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| JS-008code-template | DebuggerScript debugger window/workflow: deploy in debug mode, break/step/inspect where supported | Scaffolded | deploy | /code | plannedGET /api/mirth/actions/JS-008 | RBAC permission check · audit log entry · active server context · operator confirmation · live XML export · draft-to-live diff · deploy note · rollback snapshot |
| JS-009code-template | Debugger menus/actionsFile/edit/debug/window actions or web equivalents | Scaffolded | write | /code | plannedGET /api/mirth/actions/JS-009 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
Global Scripts7 functions · 7 wired · 0 planned · 0 extensionwired/extension
| ID | Function | Status | Risk | Surface | Adapter | Guard Requirements |
|---|---|---|---|---|---|---|
| GS-001server | Edit global deploy scriptGlobal deploy script editor with validation | API wired | deploy | /code | wiredGET /api/server/globalScripts | RBAC permission check · audit log entry · active server context · operator confirmation · live XML export · draft-to-live diff · deploy note · rollback snapshot |
| GS-002server | Edit global undeploy scriptGlobal undeploy script editor with validation | API wired | deploy | /code | wiredGET /api/server/globalScripts | RBAC permission check · audit log entry · active server context · operator confirmation · live XML export · draft-to-live diff · deploy note · rollback snapshot |
| GS-003server | Edit global preprocessorGlobal preprocessor editor and precedence explanation | API wired | write | /code | wiredGET /api/server/globalScripts | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| GS-004server | Edit global postprocessorGlobal postprocessor editor and response handling | API wired | write | /code | wiredGET /api/server/globalScripts | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| GS-005server | Save scriptsSave all global scripts with audit and snapshot | API wired | write | /code | wiredPUT /api/server/globalScripts | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| GS-006server | Validate scriptValidate current global script | API wired | read | /code | wiredGET /code | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| GS-007server | Import/export scriptsImport/export all global scripts XML | API wired | write | /code | wiredGET /api/server/globalScripts | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
Code Templates8 functions · 5 wired · 3 planned · 0 extensionactive build
| ID | Function | Status | Risk | Surface | Adapter | Guard Requirements |
|---|---|---|---|---|---|---|
| CT-001server | Library tableCreate/edit/delete libraries, revisions, descriptions | Scaffolded | destructive | /templates | wiredGET /api/codeTemplateLibraries | RBAC permission check · audit log entry · active server context · operator confirmation · live export/backup snapshot · hard confirmation phrase · rollback or irreversibility note |
| CT-002code-template | Link libraries to channelsChannel/library linking with impact graph | Scaffolded | read | /templates | plannedGET /templates | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| CT-003code-template | Template editorFunction/snippet/template editor with revision tracking | API wired | write | /templates | wiredGET /api/codeTemplates/{codeTemplateId} | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| CT-004code-template | Template contextsContext selector for where template is available | API wired | read | /templates | wiredGET /api/codeTemplates | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| CT-005code-template | JSDoc supportJSDoc parsing/update and autocomplete integration | Scaffolded | read | /templates | plannedGET /api/codeTemplates | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| CT-006code-template | Refresh/save changesRefresh with unsaved-change prompt, save templates/libraries with revision increment | API wired | write | /templates | wiredPUT /api/codeTemplateLibraries | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| CT-007code-template | Import/export libraries/templatesImport/export code templates and libraries XML | API wired | write | /templates | wiredGET /api/codeTemplates | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| CT-008code-template | Usage searchShow channels/scripts that reference template/library | Not started | read | /templates | plannedGET /api/channels | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
Users, Roles, And Access7 functions · 4 wired · 1 planned · 2 extensionactive build
| ID | Function | Status | Risk | Surface | Adapter | Guard Requirements |
|---|---|---|---|---|---|---|
| USER-001server | Users tableView username, name, email, phone, org, role/business fields, last login, description | Scaffolded | security | /admin | wiredGET /api/users | RBAC permission check · audit log entry · active server context · operator confirmation · session re-check · least-privilege role mapping · sensitive-field redaction |
| USER-002server | Refresh usersRefresh users table | Scaffolded | security | /admin | wiredGET /api/users | RBAC permission check · audit log entry · active server context · operator confirmation · session re-check · least-privilege role mapping · sensitive-field redaction |
| USER-003user | New/edit userUser create/edit form with validation and audit | API wired | security | /admin | wiredPOST /api/users | RBAC permission check · audit log entry · active server context · operator confirmation · session re-check · least-privilege role mapping · sensitive-field redaction |
| USER-004user | Delete userDestructive user removal with confirmation and audit | API wired | destructive | /admin | wiredDELETE /api/users/{userId} | RBAC permission check · audit log entry · active server context · operator confirmation · live export/backup snapshot · hard confirmation phrase · rollback or irreversibility note |
| USER-005user | Roles/permissionsRole-based operation restrictions where supported/installed | Scaffolded | security | /admin | plannedGET /api/mirth/actions/USER-005 | RBAC permission check · audit log entry · active server context · operator confirmation · session re-check · least-privilege role mapping · sensitive-field redaction |
| USER-006user | External auth/LDAPLDAP authorization panels where extension exists | Extension-dependent | extension | /admin | extensionPOST /api/mirth/actions/USER-006 | RBAC permission check · audit log entry · active server context · operator confirmation · extension installed check · restart/dependency impact warning |
| USER-007user | MFAMFA enrollment/admin panels where extension exists | Extension-dependent | extension | /admin | extensionPOST /api/mirth/actions/USER-007 | RBAC permission check · audit log entry · active server context · operator confirmation · extension installed check · restart/dependency impact warning |
Settings27 functions · 22 wired · 5 planned · 0 extensionactive build
| ID | Function | Status | Risk | Surface | Adapter | Guard Requirements |
|---|---|---|---|---|---|---|
| SET-001server | Server settings/generalServer-level environment/general settings editor | API wired | write | /settings | wiredGET /api/server/settings | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| SET-002server | Server channel settingsDefault channel behavior/settings editor | API wired | write | /settings | wiredPUT /api/server/settings | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| SET-003server | Server email/SMTP settingsSMTP settings editor with auth modes supported by target server | API wired | write | /settings | wiredPUT /api/server/settings | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| SET-004server | Server notification settingsNotification/news settings editor | API wired | write | /settings | wiredPUT /api/server/updateSettings | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| SET-005server | Backup configExport server configuration snapshot with exclusions clearly shown | API wired | read | /settings | wiredGET /api/server/configuration | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| SET-006server | Restore configDestructive restore workflow with snapshot, diff, confirmation, and audit | API wired | destructive | /settings | wiredPUT /api/server/configuration | RBAC permission check · audit log entry · active server context · operator confirmation · live export/backup snapshot · hard confirmation phrase · rollback or irreversibility note |
| SET-007server | Clear all statisticsServer-wide statistics reset with confirmation and audit | API wired | destructive | /settings | wiredPOST /api/channels/_clearAllStatistics | RBAC permission check · audit log entry · active server context · operator confirmation · live export/backup snapshot · hard confirmation phrase · rollback or irreversibility note |
| SET-008server | Administrator system preferencesWeb equivalent for system preferences | Scaffolded | read | /settings | plannedGET /settings | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| SET-009server | Administrator user preferencesPer-user UI/export/import preferences | Scaffolded | write | /settings | plannedGET /api/mirth/actions/SET-009 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| SET-010server | Code editor preferencesEditor settings, shortcuts, autocomplete behavior | Scaffolded | write | /settings | plannedGET /api/mirth/actions/SET-010 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| SET-011server | Restore default preferencesReset local/user web preferences | Scaffolded | read | /settings | plannedGET /settings | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| SET-012server | Tags tableAdd/remove tags and view channel assignment state | API wired | destructive | /settings | wiredGET /api/server/channelTags | RBAC permission check · audit log entry · active server context · operator confirmation · live export/backup snapshot · hard confirmation phrase · rollback or irreversibility note |
| SET-013server | Tag assignmentAssign tags to channels, including partial/indeterminate state | API wired | write | /settings | wiredPUT /api/server/channelTags | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| SET-014server | Configuration mapAdd/edit/remove key/value config map entries | API wired | destructive | /settings | wiredGET /api/server/configurationMap | RBAC permission check · audit log entry · active server context · operator confirmation · live export/backup snapshot · hard confirmation phrase · rollback or irreversibility note |
| SET-015server | Import/export config mapImport/export map properties with overwrite warning | API wired | write | /settings | wiredPUT /api/server/configurationMap | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| SET-016database-task | Database tasksList database cleanup/optimization tasks and affected channels | API wired | read | /settings | wiredGET /api/databaseTasks | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| SET-017database-task | Run database taskRun selected DB task with risk warning, audit, and progress | API wired | write | /settings | wiredPOST /api/databaseTasks/{databaseTaskId}/_run | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| SET-018server | Resources tableResource list with type, context, and status | Scaffolded | read | /settings | wiredGET /api/server/resources | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| SET-019resource | Add/remove resourceResource CRUD with dependency checks | API wired | destructive | /settings | wiredPUT /api/server/resources | RBAC permission check · audit log entry · active server context · operator confirmation · live export/backup snapshot · hard confirmation phrase · rollback or irreversibility note |
| SET-020resource | Reload resourceReload resource on server with status/audit | API wired | deploy | /settings | wiredPOST /api/server/resources/{resourceId}/_reload | RBAC permission check · audit log entry · active server context · operator confirmation · live XML export · draft-to-live diff · deploy note · rollback snapshot |
| SET-021resource | Directory resourceDirectory/classpath resource editor | API wired | write | /settings | wiredGET /api/extensions/directoryresource/resources/{resourceId}/libraries | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| SET-022resource | Resource usageLink resources to channels/connectors and show impact graph | Scaffolded | read | /settings | plannedGET /settings | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| SET-023server | Data pruner statusShow current pruner state and last/next run | API wired | read | /settings | wiredGET /api/extensions/datapruner/status | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| SET-024server | Data pruner scheduleEnable/disable recurring pruning and configure schedule | API wired | write | /settings | wiredPUT /api/server/settings | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| SET-025server | Prune settingsEvent/message/content pruning settings | API wired | read | /settings | wiredPUT /api/server/settings | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| SET-026server | Archive settingsArchive file/folder/zip/password/pattern settings | API wired | security | /settings | wiredPUT /api/server/settings | RBAC permission check · audit log entry · active server context · operator confirmation · session re-check · least-privilege role mapping · sensitive-field redaction |
| SET-027server | Prune now/stop prunerManual prune and stop workflow with confirmation and audit | API wired | deploy | /settings | wiredPOST /api/extensions/datapruner/{prunerOperation} | RBAC permission check · audit log entry · active server context · operator confirmation · live XML export · draft-to-live diff · deploy note · rollback snapshot |
Extensions And Plugins8 functions · 7 wired · 0 planned · 1 extensionwired/extension
| ID | Function | Status | Risk | Surface | Adapter | Guard Requirements |
|---|---|---|---|---|---|---|
| EXT-001extension | Installed connector tableView connector extensions, status, author, URL, version | API wired | extension | /resources | wiredGET /api/extensions/connectors | RBAC permission check · audit log entry · active server context · operator confirmation · extension installed check · restart/dependency impact warning |
| EXT-002extension | Installed plugin tableView plugin extensions, status, author, URL, version | API wired | extension | /resources | wiredGET /api/extensions/plugins | RBAC permission check · audit log entry · active server context · operator confirmation · extension installed check · restart/dependency impact warning |
| EXT-003extension | Install extensionUpload/install extension ZIP with restart warning | API wired | extension | /resources | wiredPOST /api/extensions/_install | RBAC permission check · audit log entry · active server context · operator confirmation · extension installed check · restart/dependency impact warning |
| EXT-004extension | Enable/disable extensionGuarded enable/disable with restart requirement and dependency impact | API wired | extension | /resources | wiredPOST /api/extensions/{extensionName}/_setEnabled | RBAC permission check · audit log entry · active server context · operator confirmation · extension installed check · restart/dependency impact warning |
| EXT-005extension | Show propertiesExtension property/details modal | API wired | extension | /resources | wiredGET /api/extensions/{extensionName}/properties | RBAC permission check · audit log entry · active server context · operator confirmation · extension installed check · restart/dependency impact warning |
| EXT-006extension | Uninstall extensionDestructive uninstall with restart requirement and dependency impact | API wired | extension | /resources | wiredPOST /api/extensions/_uninstall | RBAC permission check · audit log entry · active server context · operator confirmation · extension installed check · restart/dependency impact warning |
| EXT-007extension | Extension-specific viewsPlugin architecture for installed extension panels | Scaffolded | extension | /resources | wiredGET /api/extensions/{extensionName} | RBAC permission check · audit log entry · active server context · operator confirmation · extension installed check · restart/dependency impact warning |
| EXT-008extension | Commercial/optional connectorsFHIR, email reader, serial, ASTM, SSL manager, clustering, advanced alerting, CDR, and other extension panels when installed | Extension-dependent | extension | /resources | extensionPOST /api/mirth/actions/EXT-008 | RBAC permission check · audit log entry · active server context · operator confirmation · extension installed check · restart/dependency impact warning |
Import / Export / Backup Safety8 functions · 5 wired · 3 planned · 0 extensionactive build
| ID | Function | Status | Risk | Surface | Adapter | Guard Requirements |
|---|---|---|---|---|---|---|
| IO-001channel | Channel XML import/exportRound-trip channel XML without semantic drift | API wired | write | /deployments | wiredGET /api/channels/{channelId} | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| IO-002channel-group | Group XML import/exportRound-trip channel group XML without semantic drift | Not started | write | /deployments | plannedGET /api/channelgroups | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| IO-003alert | Alert XML import/exportRound-trip alert XML without semantic drift | Not started | write | /deployments | plannedGET /api/alerts | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| IO-004server | Global script XML import/exportRound-trip script XML without semantic drift | API wired | write | /deployments | wiredGET /api/server/globalScripts | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| IO-005code-template | Code template XML import/exportRound-trip code template/library XML without semantic drift | API wired | write | /deployments | wiredGET /api/codeTemplates | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| IO-006server | Connector XML import/exportRound-trip connector XML including filters/transformers | Not started | write | /deployments | plannedPOST /api/mirth/actions/IO-006 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| IO-007server | Server config backup/restoreBackup/restore server config with documented exclusions | API wired | read | /deployments | wiredPOST /api/mirth/rollback | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| IO-008server | Export diff evidenceCompare exported XML before/after web edits against Java Admin output | API wired | write | /deployments | wiredPOST /api/mirth/actions | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
Multi-Server, Promotion, And Safer-Than-Java Enhancements7 functions · 5 wired · 2 planned · 0 extensionactive build
| ID | Function | Status | Risk | Surface | Adapter | Guard Requirements |
|---|---|---|---|---|---|---|
| MS-001server | Single-server Java sessionMulti-server switcher for existing Mirth, BridgeLink, test, stage, prod, DR | Scaffolded | read | /servers | wiredGET /api/mirth/server | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| MS-002server | No built-in promotion flowOriginal dev-to-stage-to-prod promotion workflow with diffs and approval | Not started | read | /servers | plannedGET /servers | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| MS-003server | Java save/deploy flowDraft workspace so editing does not touch live Mirth until approved | Scaffolded | deploy | /servers | plannedGET /api/mirth/actions/MS-003 | RBAC permission check · audit log entry · active server context · operator confirmation · live XML export · draft-to-live diff · deploy note · rollback snapshot |
| MS-004server | Manual safety habitsRequired export snapshot before deploy/delete/restore | API wired | destructive | /servers | wiredPOST /api/mirth/actions | RBAC permission check · audit log entry · active server context · operator confirmation · live export/backup snapshot · hard confirmation phrase · rollback or irreversibility note |
| MS-005server | Manual reviewHuman-readable diff plus raw XML diff before deploy | API wired | deploy | /servers | wiredPOST /api/mirth/actions | RBAC permission check · audit log entry · active server context · operator confirmation · live XML export · draft-to-live diff · deploy note · rollback snapshot |
| MS-006server | Manual rollbackRollback pointer and restore workflow for channel/template/script changes | API wired | deploy | /servers | wiredPOST /api/mirth/rollback | RBAC permission check · audit log entry · active server context · operator confirmation · live XML export · draft-to-live diff · deploy note · rollback snapshot |
| MS-007server | Scattered auditDatabase-backed immutable audit with operator/server identity, before/after/diff/rollback refs, hash chain, and JSON/CSV reporting | API wired | deploy | /servers | wiredPOST /api/mirth/actions | RBAC permission check · audit log entry · active server context · operator confirmation · live XML export · draft-to-live diff · deploy note · rollback snapshot |
Security Hardening9 functions · 0 wired · 9 planned · 0 extensionactive build
| ID | Function | Status | Risk | Surface | Adapter | Guard Requirements |
|---|---|---|---|---|---|---|
| SEC-001server | Admin launcher TLS trustPer-profile TLS trust rules; production/DR cannot disable verification without explicit override | API wired | write | /actions | plannedPOST /api/mirth/actions/SEC-001 | RBAC permission check · audit log entry · active server context · operator confirmation · validation result · rollback or restore plan where applicable |
| SEC-002server | Desktop app boundarySame-origin CSRF cookie/header enforcement on every mutating web API | API wired | read | /actions | plannedGET /actions | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| SEC-003server | Local credential storageStored server credentials encrypted with an operator-supplied key and `0600` profile files | API wired | security | /actions | plannedPOST /api/mirth/actions/SEC-003 | RBAC permission check · audit log entry · active server context · operator confirmation · session re-check · least-privilege role mapping · sensitive-field redaction |
| SEC-004server | PHI-aware message readsMessage content/maps/errors/attachment previews redacted unless PHI view permission is enabled | API wired | security | /actions | plannedPOST /api/mirth/actions/SEC-004 | RBAC permission check · audit log entry · active server context · operator confirmation · session re-check · least-privilege role mapping · sensitive-field redaction |
| SEC-005server | PHI export guardAttachment export/download blocked unless PHI export permission is enabled | API wired | security | /actions | plannedPOST /api/mirth/actions/SEC-005 | RBAC permission check · audit log entry · active server context · operator confirmation · session re-check · least-privilege role mapping · sensitive-field redaction |
| SEC-006server | Abuse throttlingIn-memory read/write API rate limits with `429` and `Retry-After` | API wired | read | /actions | plannedGET /actions | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| SEC-007server | Input validationJSON body size/type checks, bounded strings, safe identifiers, bounded query limits | API wired | read | /actions | plannedGET /actions | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| SEC-008server | Safe logging/auditSecrets and sensitive tokens redacted before audit/log storage | API wired | read | /actions | plannedGET /actions | RBAC permission check · audit log entry for PHI/sensitive reads where needed |
| SEC-009server | Browser security headersCSP, frame-deny, nosniff, referrer, permissions-policy, COOP/CORP on app/API responses | API wired | security | /actions | plannedPOST /api/mirth/actions/SEC-009 | RBAC permission check · audit log entry · active server context · operator confirmation · session re-check · least-privilege role mapping · sensitive-field redaction |
Bigger Than Java Admin
These are the add-ons that make the web console more useful than the desktop Administrator instead of just equal to it.
Cross-Environment Compare
Diff dev, test, prod, and BridgeLink channel XML, scripts, resources, users, and alerts before promotion.
Operator Monitoring
Read-only queue pressure, error hotspots, connector watchlist, extension inventory, and control-plane counts on the Monitor page.
AI Change Review
OpenAI or Claude can review JavaScript, transformers, filters, SQL, regex, channel XML, events, and message metadata inside a Mirth-only boundary.
Lab Replay
Replay exported Java Admin fixtures and sample messages into a disposable lab server before production deploy.
Drift Alerts
Detect when a prod channel, alert, resource, user, or template changes outside the approved web-console workflow.
Incident Timeline
Join Mirth events, channel counters, web-console approvals, rollbacks, and operator notes into a single audit timeline.